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(57) Abstract: A domain manager device for managing a network. The manager issues to a new device joining the network a number 
of symmetric authentication keys, and preferably a number of authentication tickets. Each respective authentication key allows the 
new device to communicate securely with one respective other device comprised in the network. Each respective authentication 
ticket allows a device with a first identifier to authenticate itself to a device with a second identifier. The new device receives those 
authentication tickets whose first identifier matches its identifier. The new device presents the ticket with second identifier 'B ' to 
device 'B' to authenticate itself to 'B'. Preferably the domain manager generates a number of master device keys and issues one 
to the new device. Then the authentication tickets can be encrypted with the master device key issued to device with the second 
identifier. 
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